Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/YnXhL7YYpLW2bFS-NjS2vScf4BQ.roa
File: YnXhL7YYpLW2bFS-NjS2vScf4BQ.roa (raw, json)
Hash identifier: hTVaJ4ovZ8lAODhnLeTObjgX7ybX92E94co/dWNzQZo=
Subject key identifier: 62:75:E1:2F:B6:18:A4:B5:B6:6C:54:BE:36:34:B6:BD:27:1F:E0:14
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018BC976F10A991323873589E996EF009597
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/YnXhL7YYpLW2bFS-NjS2vScf4BQ.roa
Signing time: Mon 13 Nov 2023 16:14:57 +0000
ROA not before: Mon 13 Nov 2023 16:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.177.24.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
212.115.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Nov 2023 23:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:76:f1:0a:99:13:23:87:35:89:e9:96:ef:00:95:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 13 16:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6275e12fb618a4b5b66c54be3634b6bd271fe014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:76:4b:cb:30:25:86:93:eb:f1:e2:f9:f8:
44:50:71:4d:66:ad:3f:d7:78:55:d1:ed:28:20:c7:
09:57:0c:2e:c8:ee:08:68:a6:3a:de:bd:31:80:83:
c6:b9:68:dc:98:36:50:43:15:cd:7f:08:ac:83:2f:
25:f4:a9:0e:1d:73:52:2a:89:69:6d:fd:64:da:52:
b8:77:6b:c7:b4:a7:1c:6b:23:85:15:a0:27:ca:83:
bf:7f:6c:68:1f:21:71:c3:51:de:4c:3c:f3:62:d0:
20:bb:44:00:53:92:f2:43:b9:7e:d1:ba:ff:ca:1e:
d5:da:03:37:8f:87:1a:7d:5a:8f:5d:2c:7a:77:d6:
29:d6:58:c7:e2:4c:9d:74:bc:c0:4a:99:37:9f:7d:
9c:f1:6e:27:fe:e7:4a:6e:7b:93:8f:14:22:77:7d:
54:cc:4b:6e:ed:9c:09:3d:9a:bc:f8:d2:a4:76:31:
d7:39:d9:24:62:c6:8c:46:03:69:55:b7:47:e7:55:
28:4c:92:21:2e:55:5d:d4:30:d2:ca:be:f2:a4:a2:
0e:f7:b0:da:2d:09:db:24:17:a7:99:70:c7:02:c4:
21:dc:14:01:c6:49:bd:e8:a5:ac:28:b2:15:25:f8:
72:f9:7c:36:74:77:bc:9d:1f:f5:35:ad:af:0d:0f:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:E1:2F:B6:18:A4:B5:B6:6C:54:BE:36:34:B6:BD:27:1F:E0:14
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/YnXhL7YYpLW2bFS-NjS2vScf4BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
185.177.24.0/24
212.115.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:98:64:ec:73:7f:66:51:6e:e2:fe:8e:35:d8:a9:3d:78:ff:
79:ef:a8:28:29:d8:a5:50:a6:44:7f:22:44:7e:14:a8:44:ac:
14:ed:f3:01:68:71:d4:ae:50:ca:71:33:5d:13:52:50:f6:b4:
c0:72:2d:02:77:93:f5:a6:fc:51:62:03:9b:9b:38:8f:51:89:
c0:38:8e:04:89:55:66:82:cf:18:53:66:02:5a:85:74:55:67:
db:88:c3:06:a2:7e:17:60:32:61:1a:63:95:19:38:08:77:5d:
2a:23:45:b9:c0:3c:95:22:29:6e:68:47:f9:a1:fc:d5:c1:6d:
61:4b:ac:a1:be:f1:90:d4:91:1b:c5:df:7c:50:fe:33:7b:b5:
92:91:2c:bd:77:f2:39:16:23:bf:8a:b3:ea:54:13:69:e7:5a:
a5:3c:7e:fd:ee:e2:84:62:68:2c:21:07:c0:bf:f2:ba:21:01:
e4:de:ee:29:28:9c:3f:15:80:89:74:9a:f4:6e:57:6f:7e:e5:
fd:fc:5a:2b:d7:52:cf:ee:ed:a1:11:13:3d:85:9b:f0:00:f5:
bc:ba:89:7e:f7:f4:80:a6:1d:2e:99:c1:02:b7:40:bd:72:2b:
f3:d0:eb:0d:98:cd:8a:b8:b4:de:cd:6f:a4:42:43:46:37:70:
6e:bb:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org